Prevent 'the world' from accessing members PDFs in an Umbraco CMS - pdf

I am new to Umbraco and have inherited an existing site 3-4 years old. One of our users has just come to me and asked why her members only PDFs are freely available if Googled by name, but their containing folder in Umbraco is not - ie she has to log in to get to the folder.
Within the Umbraco Admin system I can see how to set permissions for the pages but not for individual files
Can I set permissions within Umbraco so that this cannot happen, or is it basic file permissions on the server of some sort?
I have posted this on the Umbraco forum but so far had no replies!
Hopefully somebody has an answer
Best regards
Dave

this is the exact reason why I submited an issue tracker.
Umbraco as far as 4.5.1 goes has no File Permission controls. The files are stored in the Media Folder, and therefore are always publicly available.
I have created a HTTPModule that allows you to control the permission on those media files. Please take a look here. Click here.
Only problem with this method is:
1) Only work on IIS7
2) The application pool has to run on Integrated Mode.
Please note that is not the full implementation. If you need help to get it working, feel free to ask me for more help here.

Related

Host Vb .Exe on Sharepoint Site

i want to host a vb project from a sharepoint folder instead of having it locally installed.
I am still new at this, but I only need to host the files in the same folder on sharepoint right? And then whoever can just click the .exe file, correct?
Sorry if this is a dumb question!
Thanks in advance
As already mentioned in the comment SharePoint isn't meant to store or even display applications (.exe). What started as a security measure is now part of the philosophy of MS SharePoint. Here's a list of all filetypes SP13 will block by default.
Back to your question. There is a trick how you still can upload an .exe to SharePoint:
Store the application in a folder
Zip the folder
Upload the zipped folder to a document library
Display the library on the desired site
For the future..
As there is a "Silverlight Webpart" - develop silverlight application if you know from the beginning that you want to display them on SharePoint.
Another trick: Publish your application on a host server. Then use the "Site Viewer WebPart" and point it to your application
Last one, although I wouldn't suggest it.. You can develop a .wpf-application and simply upload it as the file-type isn't blocked. But to embed the resources is just a pain in the ass..
There are for sure many other ways to do this.. Those are just the most practical ones I know if you already developed the application. The best solution is of course to create your own WebPart..

pdf link not working Joomla 3.5.1

I've had this site (donake.net) up for about a year. Was notified by someone that the link on one of the pages to a PDF wasn't working and a link to another page wasn't working.
When I tried logging in, it wouldn't take my username and password. I realized that I need to update the version of Joomla on my GoDaddy hosting account. Once I updated the version of Joomla to 3.5.1, I was able to login and access the admin side of Joomla. I think the site was attacked because there were a lot of "registered users" that weren't real.
One of the pages was set to unpublished, so I published it and that link started working fine.
The link "VIEW A SAMPLE of the book here" on this page - http://donake.net/just-make-me-a-sammich-book still won't work. I've re-linked the PDF. Deleted the PDF and re-uploaded it with the file name changed and nothing has worked.
One other thing is the icons in the Admin side of Joomla aren't displaying either. Not sure if all of this is tied together or not. My MAIN CONCERN is getting the link to work.
Any help would be greatful!!!!
Thanks
I had the same issue, I ended up calling our hosting company and they helped me edit the .htaccess file to include pdf in the RewriteRule (for me it was on line 3).
Hope this helps because I know it drove me mad trying to fix it.
Good luck!

How to allow permission for user's Home folder in cocoa application for mac

I am having a mac app in which I am deleting some data from user's Home directory.
My app is rejected saying the below reason.
The app only finds files in the ~/Downloads folder. It would be appropriate to have the user grant access to the Home folder.
So I used NSOpenPanel for asking the access from the user but I have no idea about how to give access to user's hidden folders.
EDIT
I have successfully enabled sandboxing for my app but now on allow button, what should I do?
Please guide me on this...
Any help will be highly appreciated.
Thanks in advance...
I spent some time researching this and I can say that if you want an easy solution for being able to access files outside your app's sandbox, it's just not going to be possible.
And even if you were willing to work on a tougher, more technical solution, it is still likely to not be possible.
You should look at this section in the Apple's App Sandbox Design Guide entitled "Accessing User Data", specifically this bit:
If your app requires access to the user’s home directory in order to
function, let Apple know about your needs using the Apple bug
reporting system. In addition, be sure to follow the guidance
regarding entitlements provided on the iTunes Connect website.
The next paragraph says the same thing about other app's preferences. Since you're trying to manipulate -- or delete -- other app's files, you're going to have to ask Apple for permission and/or guidance to do this.
If this were my problem, the only workaround I might possibly attempt would be to come up with might involve Security-Scoped Bookmarks and Persistent Resource Access, but as you can see from the linked documentation, it's not trivial to setup.
Summed up: if you want your app to remain sandboxed, you may need to rethink what you are trying to accomplish.
More information can be found in this related question.

SharePoint 2013 Performance Point

Dashboard designer error:
The url is not available,does not reference a sharepoint site, or you
do not have permission to connect
This is happening to the site collections under one web application only in the whole Farm. Other web applications are working fine and I can open site collections through dashboard designer.
Any suggestions????
Unattended acc is all set, Site feature is activated, site collection is added to trusted location. On database side, app pool acc has db owner access to web app db. PPS is db owner there as well.
I think this indicates to a deployment issue on this app. Maybe something went wrong when deploying webparts, the assemblies couldnt be registered or were not copied correctly. It could also be a specific access restriction issue in SharePoint or in the file system that SharePoint relies on.
Without any log information it is hard to say what is really the problem - but - have a look at windows event log for any further indications, the general log files that sharepoint/asp.net write or also consider using monitoring tools that can tell you more details on what is happening here.
I recently wrote a blog on top deployment mistakes in SharePoint. I highlight exactly these deployment mistakes in more details: Link
Andi

How to properly configure application in Live Connect and project in Visual Studio 2013

My question here is pretty simple: how to properly (and 100%) configure both Live Connect and project in Visual Studio 2013 in order for the local application run and authenticate an user properly against Microsoft account.
My question may be simple, but the answer is most likely not as simple. I've been reading countless articles and possible tutorials about this, but they are all fragmented and divided into small parts that do not really conciliate each other.
So below is the situation better described, with the steps I have followed.
[Steps Followed]
1) I have created a simple MVC application using Visual Studio 2013.
2) I have configured the project (using its properties) to use IIS Express with current Project Url : https://localhost:44302/
The project runs quite well, and external authentication with Facebook, Google and Twitter run very well too. Now for the tricky part:
3) I have created account with Microsoft and successfully created application in the Live Connect Developer Center.
4) Since configuring the field Redirect URLs to a simple http://localhost:<port> will not work (well...just because they didn't want it to, I suppose), I have additionally done the following..
5) Mapped in hosts file the following domain to localhost: # 127.0.0.1 mytestdomain.localtest.me
6) Reconfigured in Live Connect the Redirect URLs field to use the newly mapped domain: http://mytestdomain.localtest.me (although I have tried this with or without the port as well).
[End result]
With this configuration, the site runs properly locally. However, when I try to sign in with Microsoft account credentials (so, when I click the "Microsoft" button), I have redirected and received the following message:
"We're unable to complete your request
Microsoft account is experiencing technical problems. Please try again later."
I honestly do not understand why wouldn't this work, when a couple of articles suggested that doing these specific steps would make it work.
What can I be missing, why would this happen at all?
If someone can write here what am I missing and we could all join effort and create in this topic a full fledged, 100% working configuration for local application testing with Microsoft authentication, I believe it would help everyone. If such topic already exist and you can point me to it (because clearly I have missed it) it would also be great.
Thank you in advance,
Mad
Actually I just found out a proper and direct answer to my question. I totally missed it somehow during the last few days of research.
Microsoft's blog has all you need to make it work, and now mine does too. No big explanations and discussions, just basic and direct step by step article.
For those who could not find it and stumbled upon my topic here in StackOverflow, here is the link. Follow it word by word, and it will work.
Answer : Configuring your ASP.NET application for Microsoft OAuth account